kfHQchqedfEOz99[.]exe | Triage

Sharing

General

Target

kfHQchqedfEOz99.exe
Size

752KB
MD5

4376b188058ea90fceaa3d49caa7dd8a
SHA1

339d21a0d00f4662f8bd8a83c009a9bf6af92870
SHA256

50ac458169dd382176f04c26b8538ce829c903bf60cc2fa5ca7681feba1a7a98
SHA512

1111eb47fb1f3148e05238b9778ac943c2675543b3a67c36cae35a217b443d539de832e235b725bbf51c5fc55a7deebd8014772f44b920a625800ab33f30eeb3
SSDEEP

12288:jBTmC0lWxMzIHREJVk/bq4izoW/m7s2vVRjUEJ94kcWZh5SS/JXEnrvzmVictF+E:BmflWxMiQW/O4ue7fVRjUEHYSLUnr7Ar

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
kfHQchqedfEOz99.exe

Files

kfHQchqedfEOz99.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 750KB - Virtual size: 749KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ